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AMENDMENT TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1 . (Withdrawn) A method for detecting malicious applications in an electronic 
messaging environment, comprising: 

implementing a security software application in an electronic messaging system with 
connection to a data network; 

providing a local configuration of the security software application on a local 
messaging terminal, wherein the local configuration includes a list of at least one known 
malicious application; 

detecting an electronic message received or to be sent by a local messaging terminal; 

determining whether the electronic message includes any attachment; 

if an attachment is included with the electronic message, using the security software 
application to check the attachment for any malicious application based on the list of at least 
one known malicious application; 

refreshing the local configuration of the security software application from a globally 
replicated public folder within the electronic messaging system on a desired periodic basis. 

2. (Currently Amended) The method of claim 4- 19, wherein implementing a security 
software application on a local messaging terminal includes implementing an add-in software 
component to an electronic message client software of the electronic messaging system. 
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3. (Original) The method of claim 2, wherein the electronic message client software 
resides in a host server for the local messaging terminal. 

4. (Currently Amended) The method of claim 4 19, wherein the security software 
application includes a dynamic link library (DLL) application. 

5. (Currently Amended) The method of claim 4- 19, further comprising: 
prompting an error message on the local messaging terminal when the attachment to 

the electronic message matches a name on the list of the at least one known malicious 
application. 

6. (Original) The method of claim 5, further comprising: 
blocking the matched attachment from being opened or sent. 

7. (Currently Amended) The method of claim 4 19, wherein the list of at least one 
known malicious application includes a list of known virus filenames. 

8. (Currently Amended) The method of claim 4- 19, wherein the local configuration of 
the security software application includes: 
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an option to enable a checking of an attachment for any malicious application based 
on the list of at least one known malicious application; 

an option to add or remove a known malicious application from the list of at least one 
known malicious application; and 

an option to restrict an attachment type. 

9. (Currently Amended) The method of claim 4 19, wherein the local configuration of 
the security software application includes an option to set a time for the desired periodic basis 
to refresh the local configuration. 

10. (Withdrawn) A method for detecting malicious applications in an electronic 
messaging environment, comprising: 

implementing a security software application in an electronic messaging system with 
connection to a data network; 

providing a local configuration of the security software application on a local 
messaging terminal, wherein the local configuration includes a list of at least one application 
type; 

detecting a receipt of an electronic message sent to a local messaging terminal; 
determining whether the electronic message includes any attachment; 
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if an attachment is included with the electronic message, using the security software 
application to check the attachment for any malicious application based on the list of at least 
application type; 

refreshing the local configuration of the security software application from a globally 
replicated public folder within the electronic messaging system on a desired periodic basis. 

11. (Withdrawn) The method of claim 10, wherein implementing a security software 
application on a local messaging terminal includes implementing an add-in software 
component to an electronic message client software of the electronic messaging system. 

12. (Withdrawn) The method of claim 11, wherein the electronic message client 
software resides in a host server for the local messaging terminal. 

13. (Withdrawn) The method of claim 10, wherein the local configuration of the 
security software application includes: 

an option to enable a checking of an attachment for any malicious application based 
on a list of at least one known malicious application; 

an option to enable a checking of an attachment for a restricted application type based 
on the list of at least one application type; and 

an option to add or remove an application type from the list of at least one application 

type. 
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14. (Currently Amended) The method of claim 19, wherein the list of at least one 
known malicious application type comprises executable application types. 

15. (Withdrawn) The method of claim 14, wherein using the security software 
application to check the attachment comprises: 

determining whether the attachment is of one of the executable application types listed 
in the list of at least one application type; and 

if the attachment is of one of the executable application types, blocking the attachment 
from being opened or sent through the electronic messaging system. 

16. (Withdrawn) The method of claim 10, wherein the list of at least one application 
type comprises application types not capable of containing malicious applications. 

17. (Withdrawn) The method of claim 16, wherein using the security software 
application to check the attachment comprises: 

determining whether the attachment is of one of the application types not capable of 
containing malicious applications; and 

if the attachment is of one of the application types not capable of containing malicious 
applications, allowing the attachment to be opened or sent through the electronic messaging 
system. 
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18. (Currently Amended) The method of claim 43 19, wherein the local configuration 
of the security software application includes an option to set a time for the desired periodic 
basis to refresh the local configuration. 

19. (Previously Presented) A method for detecting malicious applications in an 
electronic messaging environment, comprising: 

implementing a security software application in an electronic messaging system with 
connection to a data network; 

providing a local configuration of the security software application on a local 
messaging terminal, wherein the local configuration includes a list of at least one known 
malicious application; 

detecting a receipt of an electronic message sent to the local messaging terminal; 

determining whether the electronic message includes any attachment; 

upon the determining that an attachment is included with the electronic message, 
determining whether a time period since a last update of the local configuration has passed 
beyond a predetermined threshold period; and 

upon the determining that the time period since the last update of the local 
configuration has passed beyond the predetermined threshold period, updating the local 
configuration from a globally replicated public folder within the electronic messaging 
system. 
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20. (Currently Amended) The method of claim 19, further comprising: 

using the security software application to check the attachment for any malicious 

application based on the updated local configuration and the list of at last least one known 

malicious application contained therein; and 

upon the determining that the time period since the last update of the local 

configuration has not passed beyond the predetermined threshold period, using the security 

software application to check the attachment for any malicious application based on the 

provided local configuration. 



